Which of the following backup sites takes the longest recovery time?

Which of the following best represents a calculation for Annual Loss Expectancy (ALE)?

As the Risk Manager of an organization, you are task with managing vendor risk assessments. During the assessment, you identified that the vendor is engaged with high profiled clients, and bad publicity can jeopardize your own brand.
Which is the BEST type of risk that defines this event?

Which of the following represents the best method of ensuring business unit alignment with security program requirements?

A department within your company has proposed a third party vendor solution to address an urgent, critical business need. As the CISO you have been asked to accelerate screening of their security control claims.
Which of the following vendor provided documents is BEST to make your decision: